Jasperserver authentication with CAS not working

[rsubramanian]

I have deployed jasperserver.war in tomcat 5.5.23 and it worked fine without using cas.

 

Then i deployed cas.war in tomcat and enabled ssl in tomcat as well to support cas.

 

Then i followed the acegi document http://www.acegisecurity.org/guide/springsecurity.html#cas

to configure jasperserver to use cas.

 

When i tried to hit the jasperserver page i was redirected to cas login page and the user authentication in cas also succeeded with the username jasperadmin and the user also was authenticated in jasperserver.

 

I was redirected to the page https://localhost:8443/jasperserver/flow.html?_flowId=repositoryFlow

and the firefox showed the following errors

 

The page isn't redirecting properly

Firefox has detected that the server is redirecting the request for this address in a way that will never complete

* This problem can sometimes be caused by disabling or refusing to accept cookies.

 

The cookies is also turned on in firefox.

 

The tomcat log showed up the following which made me think that it may be because of no authority is being granted

 

20:00:07,817 WARN LoggerListener,http-8443-Processor24:55 - Authentication event AuthenticationSuccessEvent: jasperadmin; details: null

 

then i turned on the log4j to support acegi security in debug mode and it showed that authorization header returned was null.

20:00:07,831 DEBUG BasicProcessingFilter,http-8443-Processor24:119 - Authorization header: null

20:00:07,831 DEBUG BasicProcessingFilter,http-8443-Processor24:119 - Authorization header: null

20:00:07,831 DEBUG BasicProcessingFilter,http-8443-Processor24:119 - Authorization header: null

 

I have attached in the tar.gz my applicationContext-Security.xml file and my tomcat log.

 

Someone help me with this.

 

Thanks. [file name=JasperserverAndCAS.gz size=30456]http://www.jasperforge.org/components/com_joomlaboard/uploaded/files/JasperserverAndCAS.gz[/file]

[rsubramanian]

Daniel --

 

I did the following steps.

 

1. Jasper deployed and authenticating by itself.

2.Cas deployed and authenticating using the default username=password.

3. Made CAS get the authentication details from external database and cas authentication succeeded with that also.

4. Enabled SSL because SSO functionality of cas works with https.

5. Used cas authentication for a simple servlet application and it succeeded too.

6. Then i configured acegi to use cas using DB authentication and thats where i faced these issues.

 

From what u have suggested I didnot try

Acegi configured to use CAS (verify that user=pwd gives Jasper session)

 

and i have been doing all these after enabling ssl. I will try in the order of what u have suggested and get back to u soon.

 

And here i would like to say that the sample servlet application worked after authenticating with CAS and so the validation of ticket also is working in CAS.

 

When i tried to hit the jasperserver page i was redirected to cas login page and the user authentication in cas also succeeded with the username jasperadmin and the user also was authenticated in jasperserver.

 

Regarding this what i mean is after configuring acegi to use cas and when i tried to hit jasperserver i was redirected to the CAS login page. There i provided the credentials jasperadmin/password and the authentication succeeded. The tomcat log showed the following

2007-10-10 11:18:22,629 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.adaptors.jdbc.SearchModeSearchDatabaseAuthenticationHandler successfully authenticated the user which provided the following credentials: jasperadmin> 2007-10-10 11:18:22,635 INFO [org.jasig.cas.CentralAuthenticationServiceImpl] - <Granted service ticket [sT-1-weHf4jPBMmTbHJdbw2aHkJdsmU2qomsgOLS-20] for service [https://localhost:8443/jasperserver/j_acegi_cas_security_check] for user [jasperadmin]> 2007-10-10 11:18:22,927 INFO [org.jasig.cas.authentication.AuthenticationManagerImpl] - <AuthenticationHandler: org.jasig.cas.authentication.handler.support.HttpBasedServiceCredentialsAuthenticationHandler successfully authenticated the user which provided the following credentials: https://localhost:8443/jasperserver/casProxy/receptor> 11:18:23,230 WARN LoggerListener,http-8443-Processor24:55 - Authentication event AuthenticationSuccessEvent: jasperadmin; details: null 11:18:23,255 WARN LoggerListener,http-8443-Processor24:55 - Authentication event InteractiveAuthenticationSuccessEvent: jasperadmin; details: org.acegisecurity.ui.WebAuthenticationDetails@fffd148a: RemoteIpAddress: 127.0.0.1; SessionId: 7E8F839DB67464635FFBD6339B4A2BC3

 

From this i infer that CAS authentication succeeded for the user jasperadmin and it also granted the service ticket. The log also shows the AuthenticationManagerImpl successfully authenticated the user jasperadmin.

 

Regarding Ezra's suggestion i have not checked the cas error log. I will do that and get back to you soon.

 

Thanks.

[rsubramanian]

I turned on my cas log and it showed that validation is also successful. It showed the following

 

2007-10-10 12:47:25,501 DEBUG [org.springframework.web.servlet.DispatcherServlet] - Rendering view [org.springframework.web.servlet.view.JstlView: name 'casServiceSuccessView'; URL [/WEB-INF/view/jsp/default/protocol/2.0/casServiceValidationSuccess.jsp]] in DispatcherServlet with name 'cas'

 

CAS works correctly only when ssl is turned on. So it is not possible to test those scenarios with ssl turned off.

 

Post edited by: rsubramanian, at: 2007/10/10 11:55

Post edited by: rsubramanian, at: 2007/10/10 12:05

[rsubramanian]

I am attaching my cas.log in this post [file name=cas.gz size=14408]http://www.jasperforge.org/components/com_joomlaboard/uploaded/files/cas.gz[/file]

[neojin]

Hi there everyone -

 

Found this thread by way of google. I am also experiencing the "page isn't redirecting properly" error w/ the latest JasperServer.

 

Was there ever a resolution posted (perhaps in another thread?) I tried searching, but didn't find anything.

 

I am not 100% sure but I think this problem might have to do with setting up an appropriate userDetailsService (the one provided from http://www.acegisecurity.org/guide/springsecurity.html#cas) is only an example and I am not quite sure what to replace it with.

 

Anyway, just wondering if anyone else has had this problem and knows how to fix -

 

Thanks,

Jin

[swood]

Can you post the configuration you did in applicationContext-security.xml to connect to CAS?

 

 

Sherman

JasperSoft